“UCLA definitely should immediately examine its insurance policies to determine if it has coverage for the costs of the breach, including the forensic investigation, the cost of notifying those affected and the defense of any possible ensuing suits,” attorney Walter J. Andrews said.